dovecot - Nov 2009 - /var/run/dovecot mode 750 too tight

dovecot-1.2.8 creates /var/run/dovecot mode 750.

I run postfix+dovecot in a virtual user setup.  Postfix calls deliver
as user vmail group vmail.

Nov 29 12:53:04 imap.invalid dovecot: [ID 583609 mail.error] 
deliver(frank): userdb lookup: connect(/var/run/dovecot/auth-master) 
failed: Permission denied (euid=500(vmail) egid=500(vmail) missing +x perm: 
/var/run/dovecot)

I will say this: dovecot's error reporting in general is head and shoulders
above the norm.  Makes tracking down problems sooo much easier.

Something else I noticed, should the dict-server socket really be mode 777?
At least a-x I would think.

-frank

Am 29.11.2009 um 19:24 schrieb Frank Cusack:
> dovecot-1.2.8 creates /var/run/dovecot mode 750.
> 
> I run postfix+dovecot in a virtual user setup.  Postfix calls deliver
> as user vmail group vmail.
> 
> Nov 29 12:53:04 imap.invalid dovecot: [ID 583609 mail.error]
deliver(frank): userdb lookup: connect(/var/run/dovecot/auth-master) failed:
Permission denied (euid=500(vmail) egid=500(vmail) missing +x perm:
/var/run/dovecot)
> 
> I will say this: dovecot's error reporting in general is head and
shoulders
> above the norm.  Makes tracking down problems sooo much easier.
> 
> Something else I noticed, should the dict-server socket really be mode 777?
> At least a-x I would think.
> 
> -frank
Probably easier to tell if you would post your setup, but I guess this fixes it:

  socket listen {
        master {
                path = /var/run/dovecot/auth-master
                mode = 0600
                user= vmail
                group = vmail
                }

Regards
Thomas

On Nov 29, 2009, at 1:24 PM, Frank Cusack wrote:
> dovecot-1.2.8 creates /var/run/dovecot mode 750.
No, it creates it with mode 0755. Did you compile from sources? Are you sure
it's 0750 if you rm -rf the directory and start "dovecot" binary
directly (instead of e.g. some init script creating it)?